affiliation not provided to SSRN
Metamorphic testingImage segmentationAdversarial attacksAdversarial training